财经外刊精读 · 互动版 · B1 深读

The $6.3 billion heist that took 20 minutes

63 亿美元,二十分钟:一次把交易所搬空的盗窃
2026 年 11 月 1 日 · 星期日 本期:加密交易所 · 资产托管 · 对手方风险(CEFR B1)
A physical bitcoin token in front of a blurred trading screen
A coin you can hold, an exchange you cannot see. On Thursday night, $6.3 billion moved in 20 minutes.
Photo: Unsplash (royalty-free library image; not the original article's photography)

30 秒速读

先建立框架,再进原文。默认只给英文,点摘要段落(或右上角「译」)出中文对译,点数字卡展开中文。

Hackers took about $6.3 billion from Binance, the world's biggest crypto exchange, in roughly 20 minutes. Customer coins are safe, the company says, but the money behind them now has to be replaced.

黑客从全球最大的加密交易所币安拿走了约 63 亿美元,前后只用了大约 20 分钟。公司说客户的币是安全的,但撑住这些币的钱,现在得由它自己补上。

$6.3bn
What left Binance in one night — the largest known theft of any kind, analysts say.
一个晚上流出币安的金额——分析人士称,这是已知规模最大的一起盗窃,任何类型都算。
20 min
How long the main transfer took, from the first order to the last wallet emptied.
主要转账用了多久——从第一笔指令到最后一个钱包被搬空。
$6.34bn
Company money set aside to cover the hole, so that no customer loses a coin.
公司预留的补窟窿资金,目的是让客户一枚币都不少。
$3bn
Frozen with help from coin issuers. The other half sits in bitcoin and ether, which nobody can freeze.
在发币方协助下冻结的金额。另一半是比特币和以太币,没人能冻结。
335m
Registered users, holding $162.8 billion of assets that Binance looks after.
注册用户数,他们在币安托管的资产合计 1,628 亿美元。
$2.9bn
Stolen across about 150 crypto attacks in 2025 — less than half of this single night.
2025 年约 150 起加密攻击的失窃总额——不到这一个晚上的一半。

原文精读 · Full Text

25 段(含标题)。点每段右上角的「译」展开中文翻译与结构配色;配图已就近排在相关段落之后。
颜色 = 句子成分,中英同色表示对应
主语 Subject 谓语 / 动词 Verb 宾语 · 表语 Object 从句 · 非谓语 Clause 状语 Adverbial 插入语 · 引述 Attribution
TITLE
The $6.3 billion heist that took 20 minutes
一场 63 亿美元的盗窃,只花了 20 分钟。
PARA 01
Binance is the world's biggest cryptocurrency exchange, and it is where most crypto prices are set.1 More coins change hands here every day than on any other platform.
币安是全球最大的加密货币交易所,大部分加密币的价格就在这里定出来。更多的币在这里每天成交,比任何其他平台都多。
PARA 02
Last Thursday night, hackers took about $6.3 billion in coins from the exchange. The whole raid lasted about twenty minutes in total, from the first order to the last.
上周四夜里,黑客从这家交易所拿走了约 63 亿美元的各类代币。整个过程前后一共只用了大约 20 分钟,从第一笔指令到最后一笔。
PARA 03
Analysts at Elliptic, a blockchain firm, call it the largest known theft of any kind in modern financial history. No bank robbery has ever come close to that number.
区块链公司 Elliptic 的分析师称这是现代金融史上已知规模最大的一起盗窃,任何类型都算。没有哪一起银行劫案比得上这个数字。
PARA 04
Binance is not a small shop on the edge of the market. It has 335 million registered users and looks after $162.8 billion of their assets.
币安不是市场边缘的一家小店。它有 3.35 亿注册用户并托管着他们 1,628 亿美元的资产。
PARA 05
That makes Binance a custodian of other people's money, not a vault.2 Customers own the coins on paper, but the company holds the keys to every wallet.
这让币安更像别人钱的托管人,而不是一座保险库。客户拥有账面上的这些币,但每个钱包的钥匙都在公司手里。
PARA 06
The stolen coins sat in a "hot wallet", the kind that is always online.3 That is why the money could move so fast, with nobody there to stop it.
被盗的这些币放在一个「热钱包」里——那种一直连着网的钱包。这就是钱能转得这么快、还没人拦得住的原因。
A server room of the kind an exchange runs. A hot wallet lives on machines like these: online, so it can pay customers at any hour.
A server room of the kind an exchange runs. A hot wallet lives on machines like these: online, so it can pay customers at any hour. 交易所的服务器机房。热钱包就住在这类机器上——连着网,才能随时给客户转账。 Photo: Unsplash (royalty-free library image; not the original article's photography)
PARA 07
The hackers did not steal the keys at all. Instead, they took over the internal system that decides which payments to approve.
黑客并没有偷钥匙。相反,他们接管了那个决定「哪笔付款可以放行」的内部系统。
PARA 08
It may have started with one employee's laptop, left open and infected. From there, the attackers reached several of Binance's own systems.
事情可能是从一名员工的笔记本电脑开始的——那台电脑开着,被植入了程序。从那里,攻击者进入了币安自己的好几个系统。
PARA 09
Their orders did not pass through the usual checks. Then, the wallets emptied themselves, one after another, in less than half an hour.
他们的指令没有经过常规审核。接着,这些钱包不到半小时就一个接一个被搬空。
How $6.3 billion left in 20 minutesNo key was stolen. The system that gives orders was taken over1Laptopgets infected2Approvalorders go out3Hot wallet$6.3bn leaves420 minutesnobody looks5Freeze$3bn stopped
Chart 1 | The raid in five steps. The last box is the only one that worked in Binance's favour, and it only caught half the money. Editor's schematic, based on Binance statements and TRM Labs' account of the attack.
PARA 10
The software also erased its own traces as it ran. That made the stolen money much harder to follow across the public blockchain.
这套程序还顺手抹掉了自己的痕迹,一边运行一边抹。这让这笔赃款在公开的链上难追得多。
PARA 11
Binance stopped all withdrawals at once.4 For about 34 hours, no customer could touch their own money, or even see where it had gone.
币安暂停了全部提现。在大约 34 小时里,没有客户能碰自己的钱,连钱去了哪都看不到。
PARA 12
A halt like this protects the exchange from a rush of sellers hitting it at the same time. It also frightens ordinary people, because it looks exactly like a bank run.5
这样的暂停护住了交易所,使它不被同一时间涌来的卖盘冲垮。它也让普通人害怕,因为看起来完全就是一场挤兑。
PARA 13
Binance rushed to shore up confidence. It promised to make every user whole, down to the last coin, using its own money and its own coins.
币安赶紧去稳住信心。它承诺让每个用户一分不亏、一枚币不少,用的是公司自己的钱和币。
PARA 14
The company set aside $6.34 billion of its own funds to cover the hole. About 80% of the stolen coins have already been replaced, mostly with coins bought on the open market.
公司拨出了 63.4 亿美元自有资金,来补这个窟窿。约 80% 的被盗资产已经补上了,大部分是在市场上买回来的。
One night, against a whole year Value of crypto stolen, $ billion Binance, 29 Oct 2026 $6.3bn All thefts, 2025 $2.9bn All thefts, 2026 to Sept $2.6bn
Chart 2 | A single exchange, a single night, and more than twice what all crypto thieves took in the whole of 2025. Sources: Reuters / TRM Labs (2025 total, about 150 attacks); industry tally reported by International Finance News for the first nine months of 2026 ($2.596bn).
PARA 15
Coin issuers could freeze6 a large part of the money before it moved again. Tether and Circle blocked $2.37 billion between them, within hours of the attack.
发币方可以冻结其中很大一部分钱,赶在它再次转走之前。Tether 与 Circle 共冻结了 23.7 亿美元,攻击后几小时内就动手。
PARA 16
A stablecoin has an owner who can block an address. Bitcoin has no such owner, so those coins can keep moving from wallet to wallet.
稳定币有一个发行方可以封掉某个地址。比特币没有这样的主人,所以这些币还能一个钱包一个钱包地流动。
PARA 17
About $3 billion of it is frozen today, locked by the companies that issued the coins. The other $3.3 billion is gone for now, and may never come back, mostly in bitcoin and ether.
其中约 30 亿美元已经被冻住,到今天也没动——锁住它们的是发币的公司。另外 33 亿美元暂时下落不明,也可能再也回不来,主要是比特币和以太币。
PARA 18
By Monday, Binance has promised to publish a "proof of reserves".7 That a public snapshot of what it says it holds for customers.
到周一,币安要公布一份「储备证明」。那是一份它「自称」替客户保管了多少资产的公开快照。
PARA 19
A snapshot is not the same thing as a full audit of the books. It shows one moment in time, and only the coins the exchange chooses to list.
快照和把账本查一遍的审计,不是一回事。它只显示某一个时点,而且只算交易所愿意列出的币。
PARA 20
Crypto prices fell on the news of the hack, but not by much. Bitcoin hit a six-week low of $76,368 before it steadied.
加密币价格在被盗消息出来后跌了,但幅度不大。比特币一度跌到六周低点 76,368 美元,随后站稳。
A price screen. What the market questioned was not the coins, but who was holding them.
A price screen. What the market questioned was not the coins, but who was holding them. 一块行情屏。真正被吓到的不是币价,而是「币放在谁手里」这件事。 Photo: Unsplash (royalty-free library image; not the original article's photography)
PARA 21
The loss was only about 2% of the exchange's user assets. Still, every single customer had exactly one counterparty: Binance.8
这笔损失只占交易所用户资产的约 2%。不过,每一个客户都只有一个对手方:币安。
PARA 22
This is not a one-off, and the trend is going the wrong way. In 2025, thieves took $2.9 billion from crypto users in about 150 separate attacks.
这不是孤例,而且趋势正往坏的方向走。2025 年,窃贼拿走了 29 亿美元,这是大约 150 次攻击加起来的数。
PARA 23
US analysts say the pattern closely matches earlier attacks blamed on North Korea. The FBI and the Secret Service are now helping with the search for the money.
美国分析人士说这个手法与早前那些被指与朝鲜有关的攻击高度相似。联邦调查局与特勤局现在都已介入,一起追这笔钱。
PARA 24
Crypto was built to cut the middleman out of finance for good. In the end, 335 million people handed the keys to a single company.
加密币本来是为把中间人永久地从金融里赶出去而造的。结果,3.35 亿人把钥匙交给了同一家公司。

核心术语 · Glossary

编号与正文上标一一对应,点正文里的数字可跳到对应卡片。默认只显示英文解释(练阅读);想看中文,点卡片标题。
1Exchange/ɪksˈtʃeɪndʒ/ 点击看中文解释 ↓

A company where people swap one coin for another, and where they leave their coins parked.

Why it matters here ▸ Binance is the biggest one, with 335 million users and $162.8bn under custody.

交易所:让人把一种币换成另一种币、并把币存在里面的公司。

拓展知识:交易所做两门生意:撮合买卖,收手续费;替客户保管币,顺手拿这些币去做别的事。第二门生意是免费的,但也把「币的安全」和「公司的安全」绑在了一起。
Extended note: An exchange is a marketplace and a custodian at the same time. Only the first job is regulated like a market.
2Custody/ˈkʌstədi/ 点击看中文解释 ↓

Looking after someone else's assets for them, while they keep the right to get them back.

Why it matters here ▸ Binance holds $162.8bn of customer assets; the customers own them but do not control them.

托管:替别人保管资产,对方保留随时取回的权利。

拓展知识:传统金融里,托管是持牌业务,客户资产必须和公司自有资产分开放(segregation),公司破产也动不到。加密交易所大多没有这层隔离,所以「平台出事、客户买单」的案例一再出现。
Extended note: Custody sounds passive. In practice it is the whole risk: whoever holds the asset decides what happens to it.
3Hot wallet/hɒt ˈwɒlɪt/ 点击看中文解释 ↓

A crypto wallet that is connected to the internet, so it can send coins out at any moment.

Why it matters here ▸ The $6.3bn left from a hot wallet, in about 20 minutes.

热钱包:一直连在互联网上的加密钱包,随时可以往外转币。

拓展知识:交易所必须留一部分币在热钱包里,否则客户提现要等半天。留多少是道算术题:留得多,提现快、被偷得多;留得少,安全、但一遇挤兑就转不动。多数交易所把 95% 以上放冷钱包。
Extended note: A hot wallet is a trade-off, not a mistake: speed for safety, decided every day.
4Withdrawal/wɪðˈdrɔːəl/ 点击看中文解释 ↓

Taking your money or coins out of an account and into your own control.

Why it matters here ▸ Binance stopped all withdrawals for about 34 hours after the hack.

提现:把账户里的钱或币取出来,放回自己手里。

拓展知识:提现是交易所最脆弱的时刻:所有客户同时要币,交易所必须真有币。所以「暂停提现」这句话本身就是信号——它说明交易所需要时间去找币,而不是简单地按个按钮。
Extended note: A withdrawal is a run in miniature. Multiply it by every customer at once, and you get a bank run.
5Bank run/bæŋk rʌn/ 点击看中文解释 ↓

When many depositors ask for their money at the same time, because they fear the bank may fail.

Why it matters here ▸ A 34-hour halt looks exactly like the start of one, which is why Binance rushed to reassure users.

挤兑:大量储户因为担心机构撑不住,同时要求取钱。

拓展知识:挤兑的危险不在「没钱」,而在「同时」。银行只留一小部分现金,剩下的都放出去了;交易所同理,客户的币被拿去做质押、借贷、做市。只要所有人不同时来取,一切正常。
Extended note: A run is a coordination problem. Every depositor is rational; the crowd is fatal.
6Freeze/friːz/ 点击看中文解释 ↓

To block coins in a wallet so that nobody can move them, usually done by the company that issued them.

Why it matters here ▸ Tether and Circle froze $2.37bn of the stolen stablecoins within hours.

冻结:把某个钱包里的币锁住,谁都动不了,通常由发币方执行。

拓展知识:这是稳定币和比特币最大的区别:USDT、USDC 的发行方手里有一份地址黑名单,可以远程把某个地址里的币锁死。所以黑客一到手就赶紧把稳定币换成以太币——换得越急,价格越差。
Extended note: Freezing works because stablecoins have an owner. It is centralisation used as a police tool.
7Proof of reserves/pruːf əv rɪˈzɜːvz/ 点击看中文解释 ↓

A public report showing how much the exchange says it holds for customers at one point in time.

Why it matters here ▸ Binance promised a snapshot within 12 hours, with results due by Monday.

储备证明:交易所公开说明自己在某一时点替客户持有多少资产。

$100 held for one year, at a 4.1% bill yieldToken holder$0.00Issuer$4.10The reserve earns the interest. The holder owns the token, not the reserve.
拓展知识:储备证明能回答「你有没有币」,回答不了「这些币是不是借来的、有没有被重复抵押」。真正的审计要看负债端(欠客户多少)和资产端(实际有什么),并且要连续看,而不是看一张快照。
Extended note: A snapshot proves a number, not a balance sheet. The liabilities are the half that usually goes missing.
8Counterparty risk/ˈkaʊntəpɑːti rɪsk/ 点击看中文解释 ↓

The risk that the other side of your deal cannot pay you back, even if the asset itself is fine.

Why it matters here ▸ The coins did not fail; the company holding them did. That is the distinction customers missed.

对手方风险:资产本身没问题,但拿着你资产的那一方还不上。

拓展知识:买币的人常以为自己在承担「币价风险」,其实还额外承担了「平台风险」。这两件事平时看不出来,一出事就分开计价:币价只跌了 2%,平台却要补 63 亿美元。
Extended note: Price risk is visible every second. Counterparty risk is invisible until the day it is not.

俚语与短语 · Slang & Phrases

文中出现的口语化表达与固定搭配,共 8 条。默认只给英文解释(练阅读),点标题看中文;每条都能一键加入生词本。
shore up/ʃɔːr ʌp/

to make something stronger or more secure, especially something weak

Binance rushed to shore up confidence after the hack.

支撑、稳住(信心、结构):把已经松动的东西加固

被盗之后,币安赶紧出来稳住信心。
set aside/set əˈsaɪd/

to keep money or time for a special purpose, instead of using it now

The company set aside $6.34 billion to cover the loss.

预留、拨出:把钱先放到一边,专门用于某件事

公司拨出 63.4 亿美元来补这笔损失。
make whole/meɪk həʊl/

to pay someone back fully, so that they end up with no loss

Binance promised to make every user whole with its own money.

全额补偿、让……不受损失:把亏掉的部分补齐

币安承诺用自有资金让每个用户一分不亏。
on record/ɒn ˈrekɔːd/

known and written down, so that it can be checked later

Analysts call it the largest known theft on record.

有记录以来:已经被记下来、可以查证的

分析人士称,这是有记录以来已知规模最大的一起盗窃。
take over/teɪk ˈəʊvə/

to take control of something that someone else was running

The hackers took over the system that approves payments.

接管、夺取控制权:把别人手里的东西拿过来管

黑客接管了负责批准付款的系统。
pass through/pɑːs θruː/

to go through a system or a check before being allowed to continue

Their orders did not pass through the usual checks.

经过(审核、流程):先过一道关,才被放行

他们的指令没有经过常规审核。
in the space of/ɪn ðə speɪs əv/

within a stated amount of time, used to show how short it was

The money left in the space of 20 minutes.

在……之内:用来强调时间之短

这笔钱在 20 分钟之内就被转走了。
hold the keys/həʊld ðə kiːz/

to have real control over an asset, not just the legal right to it

Customers own the coins, but the company holds the keys to every wallet.

掌握密钥、真正控制:不只是名义上拥有,而是能实际动用

客户拥有这些币,但钥匙在公司手里。

读后测验 · Check Your Understanding

3 道题。点选项立即判分;解析需要单独点开。
Q1What did Binance say about customers' money after the hack?
正确答案:B
第 14、15 段说得很清楚:币安「承诺用公司自己的钱让每个用户一分不亏」,并已预留 63.4 亿美元。A 把「损失占用户资产 2%」误当成「每人扣 2%」;C 文中没有保险赔付这回事(10 亿美元的 SAFU 是公司自己的基金);D 原文完全没有提。B1 第一题考事实定位:谁赔、拿谁的钱赔。
It promised to make every user whole with its own money. In a custody business, the promise to pay is the product.
Q2Why could Tether and Circle freeze part of the money, while bitcoin could not be frozen?
正确答案:C
第 16、17 段是一条对照:稳定币「有一个发行方,可以封掉某个地址」,比特币「没有这样的主人」,所以那部分币还能继续流动。A 与原文不符,黑客一到手就把稳定币换成以太币;B 把「发币方的技术能力」说成「交易所的请求」;D 原文说的是 24 亿美元的比特币和以太币「够不着」,不是已经卖掉。
A stablecoin has an owner who can block an address. Bitcoin has no such owner. Freezing is a feature of centralised coins. That is exactly what decentralisation gives up.
Q3What does "the largest known theft of any kind" mean here?
正确答案:A
「of any kind」是往大里比:不只是加密行业,而是所有类型的盗窃,包括银行劫案。B 把范围缩小成「加密行业内部」;C 把「任何类型」误读成「很多种币」;D 与原文相反,金额是明确的 63 亿美元。B1 第三题考短语在语境里的意思,关键是看「any kind」这三个词。
Analysts at Elliptic, a blockchain firm, call it the largest known theft of any kind in history. Read the qualifier, not the noun. "Of any kind" is doing all the work in that sentence.
← 全部精读